I have a need to change the external interface IPs on a number of PIX 501s from DHCP to static. As far as I can tell I would need to do the following:
Change IP address from DHCP setroute to static:
ip address outside 192.168.0.2 255.255.255.0
Add static default route out:
route outside 0.0.0.0 0.0.0.0 192.168.0.1
I need to do this completely remotely, with no hands on support available (multiple stores w/o any sort of IT). Due to how the sites are setup, I have to Remote Desktop into a PC, and telnet to the PIX, So I can't have any interruptions in connectivity during the process. I will be changing the IP from the DHCP assigned to the same IP, just statically assigned. Ex: DHCP assigns 192.168.0.2, I will assign 192.168.0.2 statically.
I tested it in a controlled environment here at my DC. I started a ping from a PC connected to the PIX to the PIX's gateway (DSL MODEM). I am able to make the changes in the following order with not impact to the pings traveling out through the PIX:
insert static route
THEN change the IP on the outside interface.
wr mem etc.
Does this method look sound? Is there a better way of doing it? Is there a way I can just plop a different config into the memory, and reboot the PIX with the new config?
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :